Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: 67jgCR7bspMd2BmF4JGmUkdey9//CBQCfAqx+Dc0wfA=
Subject key identifier: 7F:6B:B7:97:A2:C8:D9:62:5D:03:C3:BF:10:81:C7:66:4B:9B:88:EB
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 01974A7BB0A5DF3CB06BB85C4DABB325050A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0D7C
Signing time: Sat 07 Jun 2025 13:01:49 +0000
Manifest this update: Sat 07 Jun 2025 13:01:49 +0000
Manifest next update: Sun 08 Jun 2025 13:01:49 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: sQvH0dJ92r/JWJKK6nRpwlTVyle14giTaqEKzrUDxAc=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:b0:a5:df:3c:b0:6b:b8:5c:4d:ab:b3:25:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Jun 7 13:01:49 2025 GMT
Not After : Jun 8 13:01:49 2025 GMT
Subject: CN=7f6bb797a2c8d9625d03c3bf1081c7664b9b88eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:0c:fd:da:8e:50:d3:6c:b5:ea:d0:65:43:
cf:c9:31:d0:cc:03:1e:6b:ee:e5:82:40:99:9c:8b:
b4:24:b1:d5:35:b2:51:c1:d6:64:b5:49:f7:c9:8d:
e6:a8:3f:ac:a2:ec:07:3d:ae:b4:7f:96:9f:5e:fe:
84:55:81:b5:16:08:66:73:c5:b3:86:e4:62:67:41:
f5:10:7a:a3:2a:e6:e8:fa:8e:0b:fe:d0:50:db:bf:
7b:31:c2:5a:22:27:6d:49:bd:ff:5f:3c:5e:9d:0a:
d2:7e:ab:09:f7:8d:22:ed:a5:b3:7f:51:63:5c:7b:
31:56:3a:2f:42:74:71:d0:bb:6b:bf:c7:f1:ae:a0:
04:21:d6:99:07:8b:25:84:d5:13:bf:f7:ec:33:b8:
6d:35:bb:b7:ba:13:45:6e:06:48:c3:24:cf:0b:13:
ad:38:7d:df:45:bc:64:39:53:d2:74:fa:f0:ab:88:
19:05:af:42:88:06:9d:58:2f:55:e9:da:ea:c0:c6:
b6:0d:a8:e8:2d:0b:d8:fa:46:92:f6:34:2c:78:d6:
d9:dc:a5:6f:1d:8b:ff:61:5d:98:c1:6d:0d:c9:4b:
0d:5e:75:4e:aa:2a:99:a5:ed:7b:5b:fc:d8:99:e6:
88:e4:20:f7:df:2b:76:32:13:7c:b5:b1:7c:e1:c9:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:B7:97:A2:C8:D9:62:5D:03:C3:BF:10:81:C7:66:4B:9B:88:EB
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:d4:78:13:e7:67:bb:c0:ce:db:b6:19:27:89:46:4f:eb:
f9:1e:ae:cf:cc:65:54:c1:90:a4:9a:4d:4c:1d:be:65:d0:00:
9f:d8:e8:ce:5b:95:39:0b:92:7b:9e:a4:39:cd:51:67:cf:7f:
1a:5a:73:f7:9a:39:4d:e1:03:ec:21:af:1e:0e:b9:1a:da:64:
5d:bf:96:e6:6e:4f:15:19:3a:d0:aa:15:43:f6:49:ce:98:f2:
b0:1b:ee:d3:3e:18:0b:f4:ee:32:2a:87:80:1c:8c:f4:cb:5c:
68:35:ce:19:a1:59:65:b0:b5:1d:c7:b3:cf:88:a7:a6:13:9e:
6a:59:24:ff:ee:04:91:fd:90:5d:65:98:77:03:53:ca:9e:ac:
7b:4a:ff:1a:1c:4d:43:48:d5:6e:42:95:ad:78:dc:e0:c9:09:
69:6f:ec:47:c1:60:2a:8c:5c:86:85:b4:a4:4c:7b:13:61:ad:
ed:cb:cd:89:00:c7:d7:8c:e8:1f:43:1a:ac:01:90:d5:0c:de:
4a:64:5c:f2:1d:e8:4f:3d:50:cb:9f:35:e9:f5:1f:60:69:c6:
71:e9:5a:08:cf:9b:16:ce:5e:6c:3f:e3:9b:49:99:6f:7d:18:
83:98:de:e1:7b:d9:cb:28:d3:46:bf:bd:af:36:dd:b8:16:c6:
26:e8:da:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe7Cl3zywa7hcTauzJQUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmY3MGMwZWMyMTAxMGRiZDZmZTkxNWYzMzI2MzAwZmUz
MTRiMjMwHhcNMjUwNjA3MTMwMTQ5WhcNMjUwNjA4MTMwMTQ5WjAzMTEwLwYDVQQD
Eyg3ZjZiYjc5N2EyYzhkOTYyNWQwM2MzYmYxMDgxYzc2NjRiOWI4OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIoM/dqOUNNsterQZUPPyTHQzAMe
a+7lgkCZnIu0JLHVNbJRwdZktUn3yY3mqD+souwHPa60f5afXv6EVYG1Fghmc8Wz
huRiZ0H1EHqjKubo+o4L/tBQ2797McJaIidtSb3/XzxenQrSfqsJ940i7aWzf1Fj
XHsxVjovQnRx0Ltrv8fxrqAEIdaZB4slhNUTv/fsM7htNbu3uhNFbgZIwyTPCxOt
OH3fRbxkOVPSdPrwq4gZBa9CiAadWC9V6drqwMa2DajoLQvY+kaS9jQseNbZ3KVv
HYv/YV2YwW0NyUsNXnVOqiqZpe17W/zYmeaI5CD33yt2MhN8tbF84cm1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9rt5eiyNliXQPDvxCBx2ZLm4jrMB8GA1UdIwQY
MBaAFIUvcMDsIQENvW/pFfMyYwD+MUsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYt
ZmIyMzVhZmY0NjE4LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYtZmIyMzVhZmY0NjE4
LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJTUeBPn
Z7vAztu2GSeJRk/r+R6uz8xlVMGQpJpNTB2+ZdAAn9jozluVOQuSe56kOc1RZ89/
Glpz95o5TeED7CGvHg65GtpkXb+W5m5PFRk60KoVQ/ZJzpjysBvu0z4YC/TuMiqH
gByM9MtcaDXOGaFZZbC1Hcezz4inphOealkk/+4Ekf2QXWWYdwNTyp6se0r/GhxN
Q0jVbkKVrXjc4MkJaW/sR8FgKoxchoW0pEx7E2Gt7cvNiQDH14zoH0MarAGQ1Qze
SmRc8h3oTz1Qy5816fUfYGnGcelaCM+bFs5ebD/jm0mZb30Yg5je4XvZyyjTRr+9
rzbduBbGJujaFg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:37 2025 by rpki-client